portphp/pdo

Release historycaution

The package has existed for over nine years and received a release within the last year, but only three releases overall and a median interval of about four and a half years indicate a slow release cadence.

Repo bus factorcaution

All seven recent commits came from one contributor, leaving maintenance dependent on a single active person; organization backing provides some handoff capacity but does not eliminate the concentration risk.

Security policycaution

The repository has no security policy, which is a transparency gap for reporting vulnerabilities, though the package is a small adapter and the repository does use Dependabot.